Do you recognize a good idea when you see one? We want to hear from you!
Header Image

UTM (Formerly ASG) Feature Requests

Do you have an idea for Sophos UTM? Do you recognize a good idea when you see one? We want to hear from you!

I suggest you ...

You've used all your votes and won't be able to post a new idea, but you can still search and comment on existing ideas.

There are two ways to get more votes:

  • When an admin closes an idea you've voted on, you'll get your votes back from that idea.
  • You can remove your votes from an open idea you support.
  • To see ideas you have already voted on, select the "My feedback" filter and select "My open ideas".
(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can vote and comment on it.

If it doesn't exist, you can post your idea so others can vote on it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  1. Add support for Belkin F5U250 ExpressCard for laptop use.

    The Belkin F5U250 uses a Marvell Yukon Chipset and is recognized during the install process of Sophos but after the UTM boots and you log into the GUI page you don’t have an option to select the card. Only the internal network card on the laptop shows up as an option.

    1 vote
    Vote
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      I agree to the terms of service
      Signed in as (Sign out)
      You have left! (?) (thinking…)
      0 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
    • Hotspot API for selling Hotspot tickets from electronic point of sale

      There should be an api to generate hotspot tickets from an electronic point of sale.

      3 votes
      Vote
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        I agree to the terms of service
        Signed in as (Sign out)
        You have left! (?) (thinking…)
        0 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
      • Enterprise console to show scanning status on endpoint computers

        Customer wants enterprise console to show that the scanning is happening on the endpoint machine.

        For example if a customer forces a scan on the endpoint he wants to know if it is successfully running the scan, if its failing to run the scan

        2 votes
        Vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          I agree to the terms of service
          Signed in as (Sign out)
          You have left! (?) (thinking…)
          0 comments  ·  Management  ·  Flag idea as inappropriate…  ·  Admin →
        • 1 vote
          Vote
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            I agree to the terms of service
            Signed in as (Sign out)
            You have left! (?) (thinking…)
            0 comments  ·  AstaroOS  ·  Flag idea as inappropriate…  ·  Admin →
          • Networking: Integrated inventory manager

            Add a network inventory server like LanSweeper or SpiceWorks to the UTM. It would add great value to the product.

            3 votes
            Vote
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              I agree to the terms of service
              Signed in as (Sign out)
              You have left! (?) (thinking…)
              0 comments  ·  AstaroOS  ·  Flag idea as inappropriate…  ·  Admin →
            • Logging: Include Generic Proxy activity in Firewall Log

              I have found out that packets forwarded by the Generic Proxy is not shown in the live log.
              When i use the firewall live log I want to see ALL packets passing the firewall, regardless of direction or anything else.

              10 votes
              Vote
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                I agree to the terms of service
                Signed in as (Sign out)
                You have left! (?) (thinking…)
                0 comments  ·  Logging  ·  Flag idea as inappropriate…  ·  Admin →
              • Packet Filter: Disable logging for multiple (or all) rules

                It would be very nice, if there were a checkbox-action like "Disable Logging" for selected firewall rules.Everyone who have 100 rules or more knows what I mean.

                31 votes
                Vote
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  I agree to the terms of service
                  Signed in as (Sign out)
                  You have left! (?) (thinking…)
                  0 comments  ·  Usability/GUI  ·  Flag idea as inappropriate…  ·  Admin →
                • Wireless Protection: QR Code Vouchers for Hotspot

                  In addition to passwords for entry via the wireless captive portal, it will help us if QR Codes can be printed on vouchers too.
                  Users with smartphones are able to scan the QR code with the mobile phone, which contains an individual URL to activate the session, equivalent to typing in the vouchers passcode in the captive portal.

                  20 votes
                  Vote
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    I agree to the terms of service
                    Signed in as (Sign out)
                    You have left! (?) (thinking…)
                    0 comments  ·  Wireless Protection  ·  Flag idea as inappropriate…  ·  Admin →
                  • Web Protection: Exceptions for Unscannable/Encrypted Files

                    At the moment the astaro can only allow or block unscannable and encrypted files globally. Please provide a possibility to set this up for certain domains.

                    3 votes
                    Vote
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      I agree to the terms of service
                      Signed in as (Sign out)
                      You have left! (?) (thinking…)
                      0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
                    • Allow Admins to categorize web sites instead of just whitelisting them

                      Allow admins to add a website to a category instead of just white listing or allowing the site. THis would allow those categories to be used in additional rules instead of added manually to each content rule

                      2 votes
                      Vote
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        I agree to the terms of service
                        Signed in as (Sign out)
                        You have left! (?) (thinking…)
                        0 comments  ·  Web Protection  ·  Flag idea as inappropriate…  ·  Admin →
                      • UTM Endpoint Protection: Require client for connectivity

                        On some (well, one I'm aware of) competing security platforms, if a client device attempts to connect through the perimeter security device, and does not have the vendor's endpoint security client installed, the client is either forced to install the endpoint client or it is pushed automatically -- this would help with deployment and enforcement of security for local networks.

                        2 votes
                        Vote
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          I agree to the terms of service
                          Signed in as (Sign out)
                          You have left! (?) (thinking…)
                          1 comment  ·  UTM Endpoint Protection  ·  Flag idea as inappropriate…  ·  Admin →
                        • the ability to allow Youtube for Schools on a per user or per group basis.

                          per case 372759

                          Sophos Product Information
                          Sophos Product: Sophos WS1100 Content Filter
                          Version in Production: 3.7.8.1

                          Feature Request Summary

                          Customer notes that Youtube for Schools is a Global Policy. However, customer would prefer the ability to allow Youtube for Schools on a per user or per group basis.
                          How will this new feature address your business requirements?: Allow selected groups to enforce YoutubeEDU restrictions. For example, students could be enforced to YoutubeEDU, while staff could have greater access.

                          How would you rate the importance of this feature?; 1 = Critical, 5 = Nice-to-have: 1 - Critical -- Without this feature…

                          1 vote
                          Vote
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            I agree to the terms of service
                            Signed in as (Sign out)
                            You have left! (?) (thinking…)
                            0 comments  ·  Flag idea as inappropriate…  ·  Admin →
                          • Networking: USB 3.0 Network Adapter Support

                            USB 3.0 LAN adapters are fast 1000 Mb/s and it would be nice if the drivers was added to the kernel.
                            Special thoose with Asix chips, they are all over!

                            AX88179
                            http://www.asix.com.tw/products.php?op=pItemdetail&PItemID=131;71;112

                            3 votes
                            Vote
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              I agree to the terms of service
                              Signed in as (Sign out)
                              You have left! (?) (thinking…)
                              0 comments  ·  Appliance Hardware  ·  Flag idea as inappropriate…  ·  Admin →
                            • Html5 VPN RDP resolution increase/scaling

                              Please consider adding any size features to the RDP sessions through html5 vpn. The current window size can render the entire feature unusable for clients unable to operate in the 1012x700 (?) resolution.

                              6 votes
                              Vote
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                I agree to the terms of service
                                Signed in as (Sign out)
                                You have left! (?) (thinking…)
                                0 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
                              • Enhancement request for Clipboard dialog in menu

                                We have a request from a large customer to enhance the clipboard dialog in the menu.
                                It is very clumsy to work with the dialog as some usual feature are missing. Please add

                                Button 'Select all' - like CTRL+A in about every Windows application
                                Button 'Copy content' - (or better copy this every time automatically if the clip-board will be shown) - like CTRL+C
                                Button 'Delete content' - like CTRL-X
                                Button 'Show All' - like a Form maximize button to resize the dialog to show all content
                                Currently there is just a 'Send to Server'-button but no functions to copy,…

                                1 vote
                                Vote
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  I agree to the terms of service
                                  Signed in as (Sign out)
                                  You have left! (?) (thinking…)
                                  0 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
                                • 2 votes
                                  Vote
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    I agree to the terms of service
                                    Signed in as (Sign out)
                                    You have left! (?) (thinking…)
                                    0 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Dyn-compliant Endpoint Updates for HE Tunnelbroker

                                    For anyone who is using HE tunnelbroker, if you do not have a static ipv4 address, the tunnel will break if you get a new address. To work around this, HE copied the idea of dyn by creating a website that you can pass your username, password and tunnel address to update the tunnel. It's intentionally very similar to dyn, but unfortunately, the dyn update in utm seems to be hard coded.

                                    Here is the format: https://<USERNAME>:<PASSWORD>@ipv4.tunnelbroker.net/nic/update?hostname=<TUNNEL_ID>

                                    It would be a useful feature for utm to be able call this similarly to the way tui calls dyn for the…

                                    3 votes
                                    Vote
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      I agree to the terms of service
                                      Signed in as (Sign out)
                                      You have left! (?) (thinking…)
                                      0 comments  ·  Networking  ·  Flag idea as inappropriate…  ·  Admin →
                                    • Mail Security: group recipients by mail adress

                                      Within the Top10 Recipient list of the daily excecutive report, each different header adress is seperated. For example, "user.name@domain.com" is treated as different account than "User Name <user.name@domain.com". That makes it unnecessarily hard to manually calculate the total amount of emails received by one user on one day.
                                      My suggestion is to count every single mail to a unique adress, regardless of the header. In my aforementioned example the adress user.name@domain.com would have the amount of 2 emails, instead of 1 for each different header.

                                      2 votes
                                      Vote
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        I agree to the terms of service
                                        Signed in as (Sign out)
                                        You have left! (?) (thinking…)
                                        0 comments  ·  Mail Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                      • 3 votes
                                        Vote
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          I agree to the terms of service
                                          Signed in as (Sign out)
                                          You have left! (?) (thinking…)
                                          0 comments  ·  VPN  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Option to directly enable new rules

                                          Give a checkbox to directly enable new rules

                                          3 votes
                                          Vote
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            I agree to the terms of service
                                            Signed in as (Sign out)
                                            You have left! (?) (thinking…)
                                            0 comments  ·  Network Protection  ·  Flag idea as inappropriate…  ·  Admin →
                                          • Don't see your idea?

                                          Feedback and Knowledge Base